NV: Nessus vulnerability visualization for the web

  • Authors:
  • Lane Harrison;Riley Spahn;Mike Iannacone;Evan Downing;John R. Goodall

  • Affiliations:
  • Oak Ridge National Laboratory, Oak Ridge TN;Oak Ridge National Laboratory, Oak Ridge TN;Oak Ridge National Laboratory, Oak Ridge TN;Oak Ridge National Laboratory, Oak Ridge TN;Oak Ridge National Laboratory, Oak Ridge TN

  • Venue:
  • Proceedings of the Ninth International Symposium on Visualization for Cyber Security
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Network vulnerability is a critical component of network security. Yet vulnerability analysis has received relatively little attention from the security visualization community. This paper describes nv, a web-based Nessus vulnerability visualization. Nv utilizes treemaps and linked histograms to allow security analysts and systems administrators to discover, analyze, and manage vulnerabilities on their networks. In addition to visualizing single Nessus scans, nv supports the analysis of sequential scans by showing which vulnerabilities have been fixed, remain open, or are newly discovered. Nv operates completely in-browser, to avoid sending sensitive data to outside servers. We discuss the design of nv, as well as provide case studies demonstrating vulnerability analysis workflows which include a multiple-node testbed and data from the 2011 VAST Challenge.